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ODP 81—079 
19 January 1981 


MEMORANDUM FOR* Chief, Management Staff, DDA 
FROM : 


SUB ISC'?! 
REFERENCE t 


Bruce T. Johnson 

Director of Data Processing 

DCI-Designate Casey Briefings 

ltd 13 Jan* 81, same 


Memo 
aub jetft 
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4C 


1. There are no activities in OB? which merit a place on 
the Dim's list of issues needing immediate DCI-level attention* 
If for reasons of comprehensiveness some OBP items of interest 
sre desired to round out an initial briefing on current ^ 
Directorate activities, T would suggest SAFE, CAMS 2, and the 
( Community-wide Computer— assisted Compartmentation Control) 
System, Of these only 4C is likely to come to Mr. Casey's 
attention an £ problem# and onl y because of the outstanding 
request to Congress to lift the/ ’ 

expenditures for PY-B1. At 
asked for an additional 


APEX 

has 


the 


cap they put on 
Jurying, the DC I 

$890,000 (still well within the 

i ] budgeted for APEX) to permit full development of 

4C system. Attached are copies of the memoranda to the two 
Congressional committees# together with the study which outlines 
the consequences of inadequate F f — <> 1 f unuing • 

2 . one other outstanding item which could conceivably r.e 
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referred by 
our request 
Information 
the request 
considering 
would solve 
discussed in 


the incoming Secretary of Commerce to the new oCI is 
for a delegation of waiver authority under Federal _ 
Processing Standards Publications tv-63. A copy of 
in attached* we understand that Commerce is 
a general delegation to all heads of agencies, which 


our problem, 
the initial 


I do not believe this needs to be 
briefing, however. 


/s/ Bruce T- Johnson 


Bruce 


Johnson 


Attj a/s 

O/D/ODP/B Johnson :ee/19 Jan. 81 
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1 - ODP Registry ,oi -to ^ ^ ^ 

2 - O/D/ODP J1 
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CIA LETTERHEAD 
j>- ^ . / 9 VC 

0DP-0-1 640 

« NOV 1981: 


Dr, Jordan J. Baruch 

Assistant Secretary for Productivity, 

Technology and Innovation 
Department of Commerce 
Washington, D. C. 20230 

Dear Dr. Baruch: 

For some time now, members of my staff have expressed 
serious concern about the security implications of waiver 
procedures for Federal Information Processing Standards (FIPS), 
where waiver authority does not reside with the Agency head. On 
7 October, CIA officials met with Mr. Don Malone of the Depart- 
ment of Commerce, Office of the General Counsel to discuss FIPS 
waiver procedures. Mr. Malone reviewed the recently implemented 
waiver procedures for FIPS 60-63, where waiver authority has been 
assigned to the Secretary of Commerce, who, in turn, has 
delegated that authority to you. As Mr. Malone described the 
waiver procedure, individuals from your staff as well as the 
National Bureau of Standards will review FIPS waiver applications 
and make recommendations for approval or disapproval of the 
waiver request. As described in the FIPS PUBS, the waiver 
request must include " 1 ) a description of the existing or planned 
ADP system for which the waiver is being requested, 2) a des- 
cription of the system configuration, identifying those items for 
which the waiver is being requested, and including a description 
of planned expansion of the system conf igura t ion at any time 
during its life cycle, and 3) a justification for the waiver, 
including a description and discussion of the major adverse 
economic or operational impact that would result through 
conformance to this standard as compared to the alternative 
for which the waiver is requested • " 

Such a waiver request procedure and the documentation it 
requires are cause for considerable security concern to senior 
CIA management. Under the statutory provisions of the National 
Security Act of 1947, as amended, the DC1 Is charged with the 
responsibility for protecting intelligence sources and methods. 
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Relating this to current and anticipated ADPE acquisitions, it is 
our considered judgment that disclosure through the waiver pro- 
cess of the Agency 5 s capabilities and location of its resources 
would not only adversely affect the proper discharge of this 
responsibility but would also, in some cases, represent a grave 
threat to national security. Our ADPE, whether general purpose 
or unique to our requirements, is utilized for extremely 
sensitive intelligence information processing, communications, 
and real-time intelligence-operation requirements. The type and 
location of equipment represent for foreign intelligence agencies 
prime targets in terms of operational utilization, equipment 
capabilities, or the readability of signal emanations. Of equal 
signf icance is the fact that, in certain instances, identifica- 
tion with the Agency of . specific equipment or sites of operations 
could be extremely embarrassing to the United States or to 
friendly foreign governments. 

For these reasons it is my firm opinion that a delegation of 
waiver authority to the Director of Central Intelligence with 
appropriate redelegation authority would best protect the 
national security interests involved in the acquisition and use 
of ADPE by the Central Intelligence Agency for intelligence 
information processing, communications, and intelligence 
operational applications. To assist in the discharge of your 
responsibilities related to ADPE standards, I would propose that 
on an annual basis representatives from our respective agencies 
meet to review, on a classified basis, CIA implementation of 
waiver procedures. In addition, we would be pleased to exchange 
or provide such technical advice in the ADP field as you may 
wi sh . 


A similar procedure has been in effect for several years 
between CIA and the General Services Administration (GSA) with 
respect to the procurement of ADP equipment and services. GSA 
has provided CIA a blanket delegation of procurement authority 
subject to annual GSA review. GSA has conducted several such 
reviews and has expressed satisfaction that we have appropriately 
implemented ADP procurement policy and regulations. 
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I would be pleased to make available the appropriate 
members of my staff to develop in conjunction with your 
representatives a suitable delegation of waiver authority. 
Please feel free to call Mr. Bruce Johnson, my Director of 
Processing, to answer any technical or procedural questions 
you or your staff may have. Mr. Johnson may be reached on 


Da t a 


Your favorable consideration of our request would 
appreciated • 


be most 


Sincerely , 

Don I. Wortman 
Deputy Director 
for 

Admini stration 
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